Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-43788 PoC — Webpack 安全漏洞

Source
https://github.com/batzionb/webpack-cve-2024-43788
Associated Vulnerability
Title:Webpack 安全漏洞 (CVE-2024-43788)
Description:Webpack是Webpack开源的一个模块打包器。它的主要目的是捆绑 JavaScript 文件以便在浏览器中使用，但它也能够转换、捆绑或打包几乎任何资源或资产。 Webpack存在安全漏洞，该漏洞源于包含一个跨站脚本漏洞。
File Snapshot

 [4.0K]  /data/pocs/71f91003697947dae61cc055e3ba60b710c73c41
├── [4.0K]  malicious-website
│   ├── [1.4K]  malicious_server.js
│   ├── [ 271]  package.json
│   └── [ 480]  xss.js
├── [ 84K]  package-lock.json
└── [4.0K]  vulnerable-website
    ├── [4.0K]  dist
    │   └── [3.4K]  bundle.js
    ├── [1.9K]  index.html
    ├── [ 449]  package.json
    ├── [ 588]  server.js
    ├── [4.0K]  src
    │   └── [ 254]  index.js
    └── [ 347]  webpack.config.js

4 directories, 10 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.